the platform's own org, and one name for the product #246

Merged
plat merged 3 commits from platform-org into main 2026-09-01 18:22:54 +00:00
Owner

Two things tied down before the platform goes public. Design + the prod runbook: docs/design/platform-org.md.

The platform's own org. Every platform repo — gitops, mcp, agents, app-template, ci-runner, ci-builder, mitosis, hello — belongs to the org open-platform, the org that already held the front door. plat stays the root: site admin, Owner of the org, owner of no repo.

  • germinate honors the SEED's owner (<owner>__<repo> bundles): the platform org is created public with the admin as Owner, the bootstrap gitops push, the Flux source, the push-webhook, the template flag, the builds, the front door and the card all follow PLATFORM_OWNER. A legacy seed (this PR's gate runs against genesis r779, owner plat) still germinates exactly as before — that is the point of the gate here. The org shape is proven by the first reseed after the prod migration.
  • seed records what IS (the org when it holds gitops, else the admin); seed packages publish under the platform owner; resolve_seed tries the org then the admin user.
  • The coldstart gate and reseed-verify read the owner from the daughter's forge / the manifest; the release workflow links the package under the repo's own owner; the upstream manifest carries the org.
  • MITOSIS_FORK_ROOT and ORIGIN's root → open-platform/mitosis.

One name for the product. Open Platform is the product; mitosis is the feature that hands you the whole thing (README: "like buying the CD — it's yours").

  • README, wiki (URLs + the admin/org pages), docs (operator-vs-admin rewritten; proposals in product voice), the program log.
  • Deploy layer: open-platform-node.sh / .service, /etc/open-platform/node.env, open-platform-* cloud resources and Azure identities (germinate looks up open-platform-cert-manager); MITOSIS_URL/mitosis_url keep their names — they name this repo. The www PR (open-platform/www#57) follows the node-contract paths and must merge right after this.
  • Kept on purpose, documented in the design: bin/mitosis, MITOSIS_* plumbing, the mitosisVersion seed key, the plat namespace (labels, k8s names, the MCP server name).

Companions: plat/mcp#65 (0.51.0), plat/agents#108 (0.43.0), plat/app-template#26, gitops branch platform-org (merges after the registry is staged — runbook step 6).

Two things tied down before the platform goes public. Design + the prod runbook: `docs/design/platform-org.md`. **The platform's own org.** Every platform repo — gitops, mcp, agents, app-template, ci-runner, ci-builder, mitosis, hello — belongs to the org `open-platform`, the org that already held the front door. `plat` stays the root: site admin, Owner of the org, owner of no repo. - **germinate honors the SEED's owner** (`<owner>__<repo>` bundles): the platform org is created public with the admin as Owner, the bootstrap gitops push, the Flux source, the push-webhook, the template flag, the builds, the front door and the card all follow `PLATFORM_OWNER`. A legacy seed (this PR's gate runs against genesis r779, owner `plat`) still germinates exactly as before — that is the point of the gate here. The org shape is proven by the first reseed after the prod migration. - **seed records what IS** (the org when it holds gitops, else the admin); seed packages publish under the platform owner; `resolve_seed` tries the org then the admin user. - The coldstart gate and reseed-verify read the owner from the daughter's forge / the manifest; the release workflow links the package under the repo's own owner; the upstream manifest carries the org. - `MITOSIS_FORK_ROOT` and ORIGIN's root → `open-platform/mitosis`. **One name for the product.** Open Platform is the product; mitosis is the feature that hands you the whole thing (README: "like buying the CD — it's yours"). - README, wiki (URLs + the admin/org pages), docs (operator-vs-admin rewritten; proposals in product voice), the program log. - Deploy layer: `open-platform-node.sh` / `.service`, `/etc/open-platform/node.env`, `open-platform-*` cloud resources and Azure identities (germinate looks up `open-platform-cert-manager`); `MITOSIS_URL`/`mitosis_url` keep their names — they name this repo. The www PR (open-platform/www#57) follows the node-contract paths and must merge right after this. - Kept on purpose, documented in the design: `bin/mitosis`, `MITOSIS_*` plumbing, the `mitosisVersion` seed key, the `plat` namespace (labels, k8s names, the MCP server name). Companions: plat/mcp#65 (0.51.0), plat/agents#108 (0.43.0), plat/app-template#26, gitops branch `platform-org` (merges after the registry is staged — runbook step 6).
the platform's own org, and one name for the product: germinate honors the seed's owner and births open-platform public; Open Platform is the product, mitosis the feature
Some checks failed
guard-ppt / no-ppt (push) Successful in 21s
guard-ppt / no-ppt (pull_request) Successful in 21s
coldstart / coldstart (pull_request) Failing after 17m19s
b45ef2c084
the owner probe asks for the central tree, not the repo (gate P1: a legacy daughter's front-door org has a tenant ground named open-platform/gitops)
Some checks failed
guard-ppt / no-ppt (push) Has been cancelled
guard-ppt / no-ppt (pull_request) Has been cancelled
coldstart / coldstart (pull_request) Has been cancelled
df2ae5901c
runbook: what steps 2-3 actually took on prod
All checks were successful
guard-ppt / no-ppt (push) Successful in 18s
guard-ppt / no-ppt (pull_request) Successful in 16s
coldstart / coldstart (pull_request) Successful in 17m26s
e14df64146
plat merged commit accf9bf178 into main 2026-09-01 18:22:54 +00:00
plat deleted branch platform-org 2026-09-01 18:22:55 +00:00
Sign in to join this conversation.
No description provided.